Fetch the DKIM TXT record at <selector>._domainkey.<domain> and check key type, length, and test-mode flags.
Common selectors: default, google, selector1, k1, s1.
default
google
selector1
k1
s1
Validate your SPF record
Audit your DMARC policy
Inspect mail server routing
Check a sending IP